[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: de-Tor-iorate Anonymity



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The whole thing sound a little slanted to me, especially in combination
with the whole "Phantom Protocol" thing.

In particular, I found this line interesting:

"as well as show results from *A* Tor network that reveals the paths
that data travels when using Tor. This method can make using the Tor
network no more secure than using a simple open web proxy."

Notice the A in asterisks. This makes me think that the attack may have
been done on a private Tor network (rather than the main, public one).

If that's true, it's a far cry from carrying it out on the real Tor
network. Conditions are far more chaotic, and - most importantly - nodes
are spread out over many jurisdictions, in different countries, under
the control of many parties.

I don't know if this is the same attack mentioned before on this list
due to be presented tomorrow (30 May), but it seems to have the same
weaknesses from the overview.

I suppose only the full presentation will tell; I'll be watching this
subject, anyway.

- --
F. Fox
AAS, CompTIA A+/Network+/Security+
Owner of Tor node "kitsune"
http://fenrisfox.livejournal.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=Iwwa
-----END PGP SIGNATURE-----